Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: 3YSrHCJVv0rBIawOY4EMqiAfdZ8dgcoHky4SZVDL0dU=
Subject key identifier: 38:03:36:88:4D:67:6C:A7:F5:69:69:49:A9:D7:97:78:F8:83:AF:85
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019A545172B07488E3B04E3B4D295B803942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0175
Signing time: Wed 05 Nov 2025 14:00:15 +0000
Manifest this update: Wed 05 Nov 2025 14:00:15 +0000
Manifest next update: Thu 06 Nov 2025 14:00:15 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: zvCDAggtro2SNbXr5qS7UBX1IdbmNHm5qTxOXISWA9I=)
2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:72:b0:74:88:e3:b0:4e:3b:4d:29:5b:80:39:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Nov 5 14:00:15 2025 GMT
Not After : Nov 6 14:00:15 2025 GMT
Subject: CN=380336884d676ca7f5696949a9d79778f883af85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:07:3c:be:bb:8e:eb:f1:77:e1:91:48:5e:
9a:7d:0a:fd:6b:26:f3:ef:57:a3:c1:d6:94:ff:60:
0e:cd:5e:65:c9:f8:4e:0b:64:28:0c:d1:ab:c3:6a:
19:df:7a:e5:76:a7:0c:f1:6c:22:5b:57:99:fa:b0:
0b:d6:28:72:f8:cd:9b:5e:25:73:80:f8:6a:9c:2d:
19:d6:a3:52:07:1d:d6:2a:f9:fc:06:2b:be:8a:be:
b5:63:24:af:fc:28:bf:f5:95:17:76:82:1a:06:64:
45:9d:f7:00:fe:22:ea:b8:b2:37:d0:f4:dc:05:71:
ab:36:d9:bb:c9:ea:62:98:96:ba:e3:0b:cc:f7:34:
9d:91:c2:b5:43:b6:94:f0:c1:3a:85:a9:a6:f0:c2:
43:be:35:6e:3b:67:73:6d:4d:d2:d2:c2:ac:3e:94:
29:12:84:8c:9a:ab:03:e7:07:5c:d1:f1:64:44:08:
dd:61:cd:1d:c2:5d:68:2b:e2:1c:6c:66:6c:f2:bb:
da:72:96:fe:f4:88:24:d6:6c:af:93:bc:29:95:33:
87:d8:21:be:aa:7b:91:5b:be:d6:1c:60:bf:f0:a2:
c7:07:e0:29:5f:39:4b:22:2f:8b:86:c7:fb:b5:ae:
37:db:5d:a3:bd:d7:53:d9:ca:81:21:94:e9:bc:ce:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:36:88:4D:67:6C:A7:F5:69:69:49:A9:D7:97:78:F8:83:AF:85
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:22:b9:f9:5d:d8:67:26:02:2c:20:da:d3:3b:32:a2:b8:54:
38:66:28:a7:12:f7:a4:33:a6:2e:02:00:da:54:26:e9:bb:13:
9e:fb:b6:b5:4b:db:53:f1:b5:b6:0f:5d:11:f3:60:69:c8:db:
2d:55:b7:71:a6:bd:e5:4a:d8:67:15:87:93:2f:f3:f5:f7:3d:
70:ec:8c:6d:af:bd:27:53:57:53:ab:ba:f1:83:4f:3a:98:08:
f8:18:07:8c:8d:79:b4:5c:8b:a3:34:e5:46:c9:95:7c:b0:c2:
9e:36:20:b9:12:9d:f7:cb:9e:ab:d0:5d:db:b8:06:ec:33:7b:
bb:89:f0:7e:41:2e:11:1a:2a:58:a4:31:49:7f:f6:a9:b6:13:
c7:af:22:e0:3d:f3:5a:c9:b7:f8:8a:2c:0d:3e:b3:38:45:c8:
e4:11:22:e3:6f:fb:ae:c9:f9:f6:b0:eb:ce:b1:5b:d5:cc:29:
38:ca:83:05:54:8d:76:47:9d:e5:18:05:50:0a:75:5e:c1:de:
bc:d1:80:37:85:3c:f1:94:5a:52:45:56:12:31:48:1c:96:c0:
1f:01:c3:9a:4f:eb:ac:51:15:76:78:31:a3:46:47:4b:57:f2:
8d:cf:e5:b6:fb:c9:7e:ed:0e:ef:1a:39:b8:0e:19:04:2e:25:
e6:a6:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:05 2025 by rpki-client